[C#, ION/Deltar] Ion16 - [Habbo Hotel V16 Framework]

Ion16

I noticed that there are no really good C# frameworks that support v16. ION is a great base which is very easy to change protocol. Also easy to understand.

Ion uses MySQL as a database file storing and a easy plugin system to basicly do any basic function needed.

I have also changed the protocol from R34 to v16

Download: Ion16.rar

Database: [SQL] -- phpMyAdmin SQL Dump -- version 3.3.9 -- http://www.phpmyadmin.net -- -- H - Pastebin.com (The default ION database)

Features

• Register
  
  • Check name 100%
  
  
• Login
  
  • Confirm details
  • Load swim figure :)
  
  
• Console
  
  • Search user 100%
  • Show user motto.
  
  

C# Snippet (Checking name exists)

PHP Code:

---

        private void CheckName() // "@j"
        {
            string name = Request.PopFixedString();

            using (Ion.Storage.DatabaseClient dbClient = IonEnvironment.GetDatabase().GetClient())
            {
                Response.Initialize(36); // "@d"

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = '" + name + "'") == true)
                {
                    Response.AppendInt32(4);
                }
                else if (name.Contains("MOD-") || name.Contains("Mod-") || name.Contains("mod-"))
                {
                    Response.AppendInt32(3);
                }
                else
                {
                    Response.AppendInt32(0);
                }

                SendResponse();
            }
        } 


---

http://img52.imageshack.us/img52/4503/consolegui.png

http://img863.imageshack.us/img863/7897/reggo.png

http://img156.imageshack.us/img156/3...nsolepurse.png

OH I like this It seems cool ;)

oh cool. Thanks ;D

PHP Code:

---

else if (name.Contains("MOD-") || name.Contains("Mod-") || name.Contains("mod-"))
                {
                    Response.AppendInt32(3);
                } 


---

Couldn't this be shorten to this?

PHP Code:

---


else if (name.toUpper().Contains('MOD-'))
{
  //doshit

} 


---

But where is the Database ??? ...

Quote:

---

Originally Posted by Phosfor

But where is the Database ??? ...

---

Thanks for telling me ;)
Use this [SQL] -- phpMyAdmin SQL Dump -- version 3.3.9 -- http://www.phpmyadmin.net -- -- H - Pastebin.com (The default ION database)

---------- Post added at 09:54 PM ---------- Previous post was at 09:54 PM ----------

Quote:

---

Originally Posted by Pure

PHP Code:

---

else if (name.Contains("MOD-") || name.Contains("Mod-") || name.Contains("mod-"))
                {
                    Response.AppendInt32(3);
                } 


---

Couldn't this be shorten to this?

PHP Code:

---


else if (name.toUpper().Contains('MOD-'))
{
  //doshit

} 


---

---

Thanks, I suppose that could be replaced.

Thanks to give the Database ;)

Stealing Ion26 name idea? :P

Hmm, nice release ;)

Maby?! CACHE SOMETHING!? Its MySQL selecting overload.

Quote:

---

Originally Posted by wichard

Maby?! CACHE SOMETHING!? Its MySQL selecting overload.

---

Not really. :P: Just cache common info like item definitions, room categories, room models, navigator, etc, etc. Simple primary-key based lookups like this are fine.

However, about that snippet... please use prepared statements / parameters / whatever for your database queries to make your code immune to SQL exploits. People can now supply a name containing one or more SQL queries as the name, and the server will happily run them.

Anyway, good initiative && good luck!

Thanks alex.

Quote:

---

Originally Posted by Nillus

Not really. :P: Just cache common info like item definitions, room categories, room models, navigator, etc, etc. Simple primary-key based lookups like this are fine.

However, about that snippet... please use prepared statements / parameters / whatever for your database queries to make your code immune to SQL exploits. People can now supply a name containing one or more SQL queries as the name, and the server will happily run them.

Anyway, good initiative && good luck!

---

you really hate sql exploits:laugh:

nice alex

Nillus, you dont know what i mean? I mean he dont cache anything!?

Quote:

---

Originally Posted by wichard

Nillus, you dont know what i mean? I mean he dont cache anything!?

---

its a fucking framework calm down.:rolleyes:

yea yea ok =)

People why are we busy with Oldskool?! R63 is the Version now. Dont waste your time @ oldskool, get higher to BETA! If you got a nice server: Everybody like ya! :D

Old is Gold and Always Will Remain Gold no matter what anyone says.

Yea that's true, but i believe none will give a shit about Oldskool later :D

Seriously, no one seems to care that nillus is back?
This is very usefull, but awa is already working on a v14 server:P

Hes a normal persone like you. No :D

@Eronisch so you say nillus will code anything again and you think he's going to code V14?

@wichard So? He's a Habbo Retro Legend like iJeax was back in those days.

Hmmm.. I might have to develop on this, it looks pretty decent.

And. Since when was Nillus back? Nice to see some Vets are finally back.

lol nillus has been visiting he was never gone.

Ahh nevermind about Legends, those boys code for Honor and then, they're gone.

This is a cool release, hoping to see some servers using this in a near future so I can code some more CMS', and oldschool is king, nothing will ever beat the v14, r63 can shove it.

Quote:

---

Originally Posted by AWA

Stealing Ion26 name idea? :P

---

Yeahh sounded sexy :)

---------- Post added at 07:29 AM ---------- Previous post was at 07:26 AM ----------

Quote:

---

Originally Posted by PowahAlert

Thanks alex.

---

Not a problem :)

Quote:

---

Originally Posted by Nillus

Not really. :P: Just cache common info like item definitions, room categories, room models, navigator, etc, etc. Simple primary-key based lookups like this are fine.

However, about that snippet... please use prepared statements / parameters / whatever for your database queries to make your code immune to SQL exploits. People can now supply a name containing one or more SQL queries as the name, and the server will happily run them.

Anyway, good initiative && good luck!

---

Ohh really? How would I stop that? :(

Quote:

---

Originally Posted by wichard

Nillus, you dont know what i mean? I mean he dont cache anything!?

---

Actually the whole server has a small plugin system that Nillus already made and users are cached... :)

Quote:

---

Originally Posted by Žak™

its a fucking framework calm down.:rolleyes:

---

;D

---------- Post added at 07:38 AM ---------- Previous post was at 07:29 AM ----------

Quote:

---

Originally Posted by wichard

yea yea ok =)

People why are we busy with Oldskool?! R63 is the Version now. Dont waste your time @ oldskool, get higher to BETA! If you got a nice server: Everybody like ya! :D

---

You can shut-up (:

No one cares about your opinion :D

To fix SQL exploit, simply put: (I think, maybe wrong method name)

PHP Code:

---

dbClient.AddParamsWithValue("name", name); 


---

under:

PHP Code:

---

            using (Ion.Storage.DatabaseClient dbClient = IonEnvironment.GetDatabase().GetClient())
            { 


---

and replace:

PHP Code:

---

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = '" + name + "'") == true) 


---

with:

PHP Code:

---

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = @name") == true) 


---

What a gay hotel view

Quote:

---

Originally Posted by Mithex

What a gay hotel view

---

If Alex wanted to customize it he would but as a developer you have better things to do with time instead of using MX 2004.

However, Alex; you are really loving the ION framework.

Good work!

Quote:

---

Originally Posted by AWA

To fix SQL exploit, simply put: (I think, maybe wrong method name)

PHP Code:

---

dbClient.AddParamsWithValue("name", name); 


---

under:

PHP Code:

---

            using (Ion.Storage.DatabaseClient dbClient = IonEnvironment.GetDatabase().GetClient())
            { 


---

and replace:

PHP Code:

---

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = '" + name + "'") == true) 


---

with:

PHP Code:

---

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = @name") == true) 


---

---

Ahh yes, I have used AddParamsWithValue in Aleeda :)
I never knew they blocked SQL injections

@HabboCOIN - Yes I do love the Ion framework :)

[QUOTE=WizardKing;6303790]@Eronisch so you say nillus will code anything again and you think he's going to code V14?
QUOTE]
So you say?

Seriously, learn to fkng read english?
That's not even close what i wrote..

Hey has anyone actually done anything from this? (: